?? 2496.txt
字號:
Rule:--Sid:2496--Summary:This event is generated when an attempt is made to exploit a knownvulnerability in the Microsoft RPC service.--Impact:Denial of Service (DoS). Possible execution of arbitrary code leading tounauthorized remote access to the victim host.--Detailed Information:It may be possible for an attacker to cause a DoS condition in theMicrosoft RPC service when multiple simultaneous requests are made to avulnerable host. This can lead to an exhaustion of system resourcescausing the DoS.--Affected Systems: Windows systems running RPC services--Attack Scenarios:An attacker may attempt to bind to the RPC service many times in anattempt to cause the DoS condition to occur.--Ease of Attack:Difficult.--False Positives:None known.--False Negatives:None known.--Corrective Action:Block access to RPC ports 135, 139 and 445 for both TCP and UDP protocols from external sources using a packet filtering firewall.Apply the appropriate vendor supplied patches--Contributors:Sourcefire Research TeamMatt Watchinski <mwatchinski@sourcefire.com>Nigel Houghton <nigel.houghton@sourcefire.com>--Additional References:--
?? 快捷鍵說明
復(fù)制代碼
Ctrl + C
搜索代碼
Ctrl + F
全屏模式
F11
切換主題
Ctrl + Shift + D
顯示快捷鍵
?
增大字號
Ctrl + =
減小字號
Ctrl + -